Agentic IaC Vulnerability Detection and Remediation

Problem

Exposed cloud storage can expose sensitive data and create avoidable incident or cost response. Identifying these misconfigurations manually before they reach production is challenging.

How it works

The project processes Terraform and Dockerfile inputs to detect infrastructure misconfigurations. It proposes remediations and validates those proposals with Checkov, intending to shift detection into CI/CD before deployment.

Impact

Automating detection and remediation reduces the risk of deploying insecure infrastructure. Teams receive validated fix proposals early in the development lifecycle.

Future direction

Aspirational goals include expanding the scope of analyzed resources and supporting additional IaC frameworks.